enforce black in CI

We do it in a rather convoluted way (ie. tox) but it will allow us to
hook more goodies later, e.g. mypy, unit tests, etc.
2 jobs for blacken in 1 minute and 16 seconds (queued for 4 seconds)